QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-37948

Back to search

CVE-2025-37948

Published: May 20, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next. On exit from a BPF program, emit the BHB mititgation sequence. This is only applied for 'classic' cBPF programs that are loaded by seccomp.

VendorProductVersions

Linux

Linux

affected
0be7320a635c2e434e8b67e0e9474a85ceb421c4 - < c6a8735d841bcb7649734bb3a787bb174c67c0d8
affected
0be7320a635c2e434e8b67e0e9474a85ceb421c4 - < 993f63239c219696aef8887a4e7d3a16bf5a8ece
affected
0be7320a635c2e434e8b67e0e9474a85ceb421c4 - < 8fe5c37b0e08a97cf0210bb75970e945aaaeebab
affected
0be7320a635c2e434e8b67e0e9474a85ceb421c4 - < 42a20cf51011788f04cf2adbcd7681f02bdb6c27
affected
0be7320a635c2e434e8b67e0e9474a85ceb421c4 - < 38c345fd54afd9d6ed8d3fcddf3f6ea23887bf78

+2 more versions

Linux

Linux

affected
3.7
unaffected
0 - < 3.7
unaffected
5.10.239 - <= 5.10.*
unaffected
5.15.186 - <= 5.15.*
unaffected
6.1.139 - <= 6.1.*

+4 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now